Логотип exploitDog
bind:CVE-2021-1614
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-1614

Количество 3

Количество 3

nvd логотип

CVE-2021-1614

больше 4 лет назад

A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-8m79-xg2c-ggjm

больше 3 лет назад

A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.

EPSS: Низкий
fstec логотип

BDU:2021-04003

больше 4 лет назад

Уязвимость микропрограммного обеспечения маршрутизаторов Cisco SD-WAN, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить несанкционированный доступ к устройству

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-1614

A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.

CVSS3: 5.3
1%
Низкий
больше 4 лет назад
github логотип
GHSA-8m79-xg2c-ggjm

A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.

1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-04003

Уязвимость микропрограммного обеспечения маршрутизаторов Cisco SD-WAN, связанная с чтением за границами буфера в памяти, позволяющая нарушителю получить несанкционированный доступ к устройству

CVSS3: 5.3
1%
Низкий
больше 4 лет назад

Уязвимостей на страницу